Read the docs

BigProf

Records23All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

BigProf records in CISA KEV

No BigProf vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

4 records in Online Clinic Management System · all components

Priority LOW 28

A vulnerability has been discovered in BigProf Online Clinic Management System 2.2, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /clinic/medical_records_view.php, in the F…

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00391 Published 2023-11-30 No fix listed CWE-79
Priority LOW 28

A vulnerability has been discovered in BigProf Online Clinic Management System 2.2, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /clinic/disease_symptoms_view.php, in the…

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00388 Published 2023-11-30 No fix listed CWE-79
Priority LOW 28

A vulnerability has been discovered in BigProf Online Clinic Management System 2.2, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /clinic/events_view.php, in the FirstRecor…

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00388 Published 2023-11-30 No fix listed CWE-79
Priority LOW 28

A vulnerability has been discovered in BigProf Online Clinic Management System 2.2, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /clinic/patients_view.php, in the FirstRec…

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00388 Published 2023-11-30 No fix listed CWE-79
Open these records in search →